← Back to Dashboard

CVE-2026-12394

CRITICAL NVD
CVSS Score
9.8
Severity
CRITICAL
Source
NVD
Published
Jul 27, 2026
Description

The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an account with an arbitrary role, including administrator, leading to full site compromise.

View Full Details ← Back